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IN THE CLAIMS : 

Please amend claims 1-47 as follows. 

1. (Currently Amended) A method for authenticating a user of a data transfer 
device, comprising: 

setting up (202) a data transfer connection from the data transfer device to a 
service access point; 

characterized by 

inputting (204) identification data of a subscriber of a mobile communications 
system to the service access point; 

checking (206) from the mobile communications system whether the mobile 
subscriber identification data contains an access right to the service access point; and, 

if a valid access right exists, generating (242) a password, transmitting (244) the 
password to a subscriber terminal corresponding to the mobile subscriber identification 
data, and logging in (246) to the service access point from the data transfer device using 
the password transmitted to the subscriber terminal. 

2. (Currently Amended) A method according to claim 1, characterized in 
that wherein the mobile subscriber identification data consist of a mobile subscriber 
international ISDN number [[(MSI SDN)]] MSISDN . 

3. (Currently Amended) A method according to claim 1, characterized in 
that wherein in connection with the check, a query is sent to the home location register of 
the mobile communications system. 
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4. (Currently Amended) A method according to claim 3, characterized in 
that wherein the mobile subscriber identification data consist of the mobile subscriber 
international ISDN number, and with the query first the home location register of the 
mobile communications system is searched for the international mobile subscriber 
identity [[(IMSI)]] IMSI corresponding to the mobile subscriber international ISDN 
number and then with the international mobile subscriber identity the home location 
register of the mobile communications system is searched for the related subscriber data, 
where the access right is defined. 

5. (Currently Amended) A method according to claim 1, characterized in 
that wherein the password is transmitted to the subscriber terminal in a packet-switched 
message. 

6. (Currently Amended) A method according to claim 1, characterized in 
that wherein the password is transmitted to the subscriber terminal in a short message. 

7. (Currently Amended) A method according to claim 1, characterized in 
that wherein the data transfer connection between the data transfer device and the service 
access point is a radio link. 

8. (Currently Amended) A method according to claim 7, characterized in 
that wherein the radio link is implemented using a wireless local area network. 

9. (Currently Amended) A method according to claim 7, characterized in 
that wherein the radio link is implemented using a short-range radio transceiver. 



10. (Currently Amended) A method according to claim 1, characterized 
in that wherein the data transfer connection between the data transfer device and the 
service access point is wired. 

11. (Currently Amended) A method according to claim 1, characterized 
in that wherein the method further comprises: billing for the data transfer connection 
between the data transfer device and the service access point in a bill directed to the 
identification data of the mobile subscriber. 

12. (Currently Amended) A method according to claim 1, characterized 
in that wherein the data transfer connection initially set up between the data transfer 
device and the service access point is maintained until login. 

13. (Currently Amended) A method according to claim 1, characterized 
in that wherein the method further comprises: transmitting a second password from the 
service access point to the data transfer device over a data transfer connection, the second 
password being also used in connection with login. 

14. (Currently Amended) A method according to claim 1, characterized 
in that wherein the method further comprises: transmitting a confirmation identifier from 
the service access point to the data transfer device over a data transfer connection and 
transmitting the same confirmation identifier to the subscriber terminal together with the 
password, the password being only used if the received confirmation identifiers are the 
same. 
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15. (Currently Amended) A method according to claim 1, characterized 
in that wherein the data transfer connection between the data transfer device and the 
service access point is set up when the subscriber terminal is roaming. 

16. (Currently Amended) A method according to claim 15, characterized 
in that wherein the method further comprises: 

informing the subscriber terminal that if the roaming by the subscriber terminal in 
the visited mobile communications system fulfils a predetermined criterion, the data 
transfer connection from the data transfer device to the service access point is provided at 
a lower charge than usual; and 

implementing the data transfer connection from the data transfer device to the 
service access point at a lower charge than usual if the predetermined criterion is met. 

17. (Currently Amended) A method according to claim 16, ch a rac terized 
in that wherein the method further comprises: receiving at the visited mobile 
communications system information from the subscriber terminal indicating that a lower 
charge data transfer connection to the service access point is preferred. 

18. (Currently Amended) A method according to claim 17, characterized 
by wherein the method further comprises: receiving at the authentication server 
information from the visited mobile communications system indicating that the data 
transfer device of the user of the subscriber terminal will be provided with a lower charge 
data transfer connection to the service access point. 

19. (Currently Amended) A method according to claim 16, characterized 
in that wherein the predetermined criterion is met if the subscriber terminal contacts the 
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visited mobile communications system and/or if the subscriber terminal continues 
roaming in the visited mobile communications system for a predetermined time. 

20. (Currently Amended) A method according to claim 16, characterized 
in that wherein to check whether the predetermined criterion is met, a periodic query is 
made to the home location register of the mobile subscriber's home mobile 
communications system. 

21. (Currently Amended) A method according to claim 1, characterized 
in that wherein the method further comprises: using the mobile subscriber identification 
data as a user ID in connection with login. 

22. (Currently Amended) A method according to claim 1, characterized 
in that wherein the method further comprises: transmitting a user ID to the subscriber 
terminal corresponding to the mobile subscriber identification data and using the 
transmitted user ID in connection with login. 

23. (Currently Amended) A method according to claim 1, characterized 
in that wherein the method further comprises: transmitting a user ID to the data transfer 
device over a data transfer connection and using the transmitted user ID in connection 
with login. 

24. (Currently Amended) A system for authenticating a user of a data transfer 
device, comprising: a data transfer device (100) , a service access point (110) t hat can be 
linked to the data transfer device (100) over a first data transfer connection (102) , and an 
authentication server (111) linked to the service access point (110) over a second data 
transfer connection; 



characterized in that wherein 

the service access point (110) is configured to receive over the first data 
transmission connection (106) identification data of a subscriber of a mobile 
communications system inputted from the data transfer device (WO) and to transmit the 
mobile subscriber identification data to the authentication server (444) over the second 
data transfer connection; 

the authentication server (444) is configured to check from the mobile 
communications system (454) over a third data transfer connection whether the mobile 
subscriber identification data contains an access right to the service access point (110) 
and, if a valid access right exists, to generate a password and transmit the password to a 
subscriber terminal (403) corresponding to the identification data of the subscriber of the 
mobile communications system (13 4 ) ; and 

the data transfer device (400) is configured to use the password transmitted to the 
subscriber terminal (403) in connection with login to the service access point (440). 

25. (Currently Amended) A system according to claim 24, characterized 
in that wherein the identification data of the subscriber of the mobile communications 
system (434) consist of the mobile subscriber international ISDN. 

26. (Currently Amended) A system according to claim 24, characterized 
in that wherein the authentication server (444) is an Authentication, Authorization and 
Accounting AAA server (Authentication, Authorization and Accounting) . 

27. (Currently Amended) A system according to claim 24, characterized 
in that wherein for checking the access right to the service access point (440), the 
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authentication server (111) is configured to transmit a query to the home location register 
(130) of the mobile communications system (13 4 ) . 

28. (Currently Amended) A system according to claim 27, characterized 
in that wherein the identification data of the subscriber of the mobile communications 
system (131) consist of the mobile subscriber international ISDN number, and the 
authentication server (111) is configured to submit the query to first search the home 
location register (130) of the mobile communications system (13 4 ) for the international 
mobile subscriber identity corresponding to the mobile subscriber international ISDN 
number and then use the international mobile subscriber identity to search the home 
location register (130) of the mobile communications system (131) for the related 
subscriber data, where the access right is defined. 

29. (Currently Amended) A system according to claim 24, characterized 
in that wherein the authentication server (111) is configured to transmit the password to 
the subscriber terminal (102) in a packet-switched message. 

30. (Currently Amended) A system according to claim 24, characterized 
in that wherein the authentication server (11 4 ) is configured to transmit the password to 
the subscriber terminal (102) in a short message. 

31. (Currently Amended) A system according to claim 24, characterized 
in that wherein the first data transfer connection (106) is a radio link. 

32. (Currently Amended) A system according to claim 31, characterized 
in that wherein the service access point (110) is configured to implement the radio link 
using a wireless local area network. 
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33. (Currently Amended) A system according to claim 31, characterized 
in that wherein the service access point £!4G}-comprises a short-range radio transceiver 
for implementing the radio link. 

34. (Currently Amended) A system according to claim 24, characterized 
in that wherein the first data transfer connection (106) is wired. 

35. (Currently Amended) A system according to claim 24, characterized 
in that wherein the system further comprises an accounting server (116) , which is 
configured to generate the billing data relating to the first data transfer connection (106) 
and to transfer the data to the mobile communications system (13 4 ) , in which the billing 
data are formed into a bill associated with the identification data of the subscriber of the 
mobile communications system (13 4 ) . 

36. (Currently Amended) A system according to claim 24, characterized 
in that wherein the service access point (110) is configured to maintain the first data 
transfer connection (106) initially set up between the data transfer device (100) and the 
service access point (110) until login. 

37. (Currently Amended) A system according to claim 24, characterized 
in that wherein the authentication server (111) is configured to transmit a second 
password from the service access point (110) to the data transfer device (100) over the 
first data transfer connection (106) and the data transfer device (100) is configured to also 
use the second password in connection with login. 

38. (Currently Amended) A system according to claim 24, characterized 
in that wherein the authentication server (111) is configured to transmit a confirmation 



identifier via the service access point (110) t o the data transfer device (100) over the first 
data transfer connection (106) and to transmit the same confirmation identifier to the 
subscriber terminal (102) together with the password. 

39. (Currently Amended) A system according to claim 24, characterized 
in that wherein the first data transfer connection (106) is set up when the subscriber 
terminal (102) is roaming. 

40. (Currently Amended) A system according to claim 39, characterized 
in that wherein the visited mobile communications system (126) is configured to inform 
the subscriber terminal (102) t hat if the roaming by the subscriber terminal (102) in the 
visited mobile communications system (126) fulfils a predetermined criterion, the data 
transfer connection (106) from the data transfer device (100) t o the service access point 
(110) is provided at a lower charge than usual, and the authentication server (111) is 
configured to implement the data transfer connection (106) from the data transfer device 
(100) to the service access point (110) at a lower charge than usual if the predetermined 
criterion is met. 

41. (Currently Amended) A system according to claim 40, characterized 
in that wherein the visited mobile communications system (126) is configured to receive 
from the subscriber terminal (403)-information indicating that a data transfer connection 
(406)-to the service access point (440)-provided at a lower charge than usual is preferred. 

42. (Currently Amended) A system according to claim 41, c h o r o c t c r i z c d 
in that wherein the authentication server (1 14) is configured to receive from the visited 
mobile communications system £±36}-information indicating that the data transfer device 
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(100) of the user of the subscriber terminal (102) w ill be provided with a data transfer 
connection (106) to the service access point (i40)-implemented at a lower charge than 
usual. 

43. (Currently Amended) A system according to claim 40, characterized 
in that wherein the predetermined criterion is met if the subscriber terminal (±02) 
contacts the visited mobile communications system (126) and/or if the subscriber 
terminal (102) continues roaming in the visited mobile communications system (426) 
continues for a predetermined time. 

44. (Currently Amended) A system according to claim 40, characterized 
in that wherein to check whether the predetermined criterion is met, a periodic query is 
made to the home location register (130) of the home mobile communications system 
(131) of the subscriber terminal (402). 

45. (Currently Amended) A system according to claim 24, characterized 
in that wherein the data transfer device (100) is configured to use the mobile subscriber 
identification data as the password to log in to the service access point (110) . 

46. (Currently Amended) A system according to claim 24, characterized 
in that wherein the authentication server (111) is configured to transmit a user ID to the 
subscriber terminal (402)-corresponding to the identification data of the subscriber of the 
mobile communications system (131) and the data transfer device (100) is configured to 
use the user ID transmitted to the subscriber terminal (102) in connection with login to 
the service access point (110) . 
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47. (Currently Amended) A system according to claim 24, characterized 
in that wherein the authentication server (11 4 ) is configured to transmit the user ID via 
the service access point (110) to the data transfer device (100) over the first data transfer 
connection (106) and the data transfer device (100) is configured to use the user ID 
transmitted to the data transfer device (100) in connection with login to the service access 
point (HO). 
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